960 matches found
CVE-2016-5483
It was discovered that the mysql and mysqldump tools did not correctly handle database and table names containing newline characters. A database user with privileges to create databases or tables could cause the mysql command to execute arbitrary shell or SQL commands while restoring database...
Open edX edx-platform Information Disclosure Vulnerability
Open edX edx-platform is a free and open source course management system CMS created by Harvard University and the Massachusetts Institute of Technology Harvard and MIT. A security vulnerability exists in versions of Open edX edx-platform prior to 2015-08-25. An attacker could exploit the...
Information disclosure
Open edX edx-platform before 2015-08-25 requires use of the database for storage of SAML SSO secrets, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging access to a database backup...
CVE-2015-6671
Open edX edx-platform before 2015-08-25 requires use of the database for storage of SAML SSO secrets, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging access to a database backup...
CVE-2015-6671: Exposure of Sensitive Information to an Unauthorized Actor
Open edX edx-platform before 2015-08-25 requires use of the database for storage of SAML SSO secrets, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging access to a database backup...
PT-2017-7047
Name of the Vulnerable Software and Affected Versions edx-platform versions prior to 2015-08-25 Description The issue allows context-dependent attackers to obtain sensitive information by leveraging access to a database backup, as the database is used for storage of SAML SSO secrets...
emlog personal blog system background there is privilege elevation vulnerability
Impact version emlog = 5.1.2 Prerequisites: need to log in the background Exploit Log in the background after a visit to admin/? action=phpinfo page, get website physical path In the database backup page to back up the database, export to a local computer, and then edit the exported . sql format ...
Syrian's joomla 1.6.x Download Database Backup
No description provided by source...
Database Backup Download Vulnerability in Joomla!
Joomla! is an open source content management system CMS. A database backup download vulnerability exists in joomla version 1.6.x. The vulnerability stems from the program's failure to adequately filter user-submitted input, which can be exploited by an attacker to download database backups to...
WP Database Backup <= 4.3.5 - Cross-Site Request Forgery (CSRF)
The WP Database Backup WordPress plugin was affected by a Cross-Site Request Forgery CSRF security vulnerability...
How to take a XenServer toolstack (XAPI) database dump and view it
XenServer stores the vital information related to objects such asVM, VIF, VDI, PBD in an XMLformat file under /var/xapi/state.db.Thisfile is synced between pool membersat regular intervals to maintain aconsistent view of the XenServer pool. We recommend that you back up this XAPIdatabase file. Th...
WP Database Backup < 4.3.1 - CSRF & XSS
The WP Database Backup WordPress plugin was affected by a CSRF & XSS security vulnerability...
Teampass 2.1.25 Unauthenticated Access
Document Title: =============== Teampass v2.1.25 - Unauthenticated Access Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1844 Release Date: ============= 2016-05-18 Vulnerability Laboratory ID VL-ID: ==================================== 18...
Transaction Log Truncation Failure for MSSQL Instances on Shared VHDX
Challenge When attempting to run a backup job for a Microsoft SQL Server that is in either a SQL Server Failover Cluster or AlwaysOn Failover Cluster with a shared VHDX, the backup job reports the warning: Failed to truncate transaction logs for SQL instances: . Possible reasons: lack of...
WordPress 备份与恢复插件 WP Backitup Lite 数据库备份文件泄露漏洞
No description provided by source...
emlog automatic backup plug-in leaked the entire Station database backup vulnerability-vulnerability warning-the black bar safety net
This is my third time in your blog to find the fatal flaw. The first is a third-party Storage, the solution is to delete. The second is"EMLOG album", which is this article:is. The third time is this time, I wrote one using the script, directly to your blog, the whole site backup file down under,...
Geeklog 2.1.0 - Multiple Vulnerabilities
Exploit for php platform in category web applications Geeklog 2.1.0 - Command Injection, XSS, Command Injection Vulnerabilities Overview The admin area of Geeklog suffers from two vulnerabilities that can lead to code execution: OS Command Injection and Upload of Files with Dangerous Type. The...
ZeusCMS 0.2 admin/backup.sql 数据库备份文件泄露
No description provided by source...
